Commit Graph

150 Commits

Author SHA1 Message Date
alexandre.pires b4f4fe2f07 Refactor SteamOS session management and launcher scripts
- Removed obsolete launch_desktop.sh and launch_session.sh scripts.
- Introduced new steam-launcher script to handle Steam launching and session tracking.
- Added steam-short-session-tracker for monitoring short Steam sessions and triggering repairs.
- Created steamos and steamos-session scripts for managing the SteamOS session.
- Implemented steamos-session-select for switching between Gamescope and Plasma sessions.
- Updated SDDM configuration for autologin and session management.
- Added new systemd services and targets for managing Gamescope and Steam sessions.
- Created desktop entries and icons for ALVR and SteamOS shortcuts.
- Enhanced logging and error handling across scripts.
- Cleaned up unused systemd slice and service files.
- Updated Ansible playbook to reflect new configurations and file structures.
2025-12-01 17:25:18 +01:00
alexandre.pires edbe8fbf6f feat: Add ALVR installation and configuration to playbook, update mstream module with ingress and deployment resources 2025-11-18 18:19:42 +01:00
alexandre.pires adc893de6e feat: Enhance game station setup and configuration
- Updated README with detailed instructions for creating a dedicated Ansible user on Linux, including SSH key setup and passwordless sudo.
- Added userConfigurations.json for Steam ROM Manager with configurations for various gaming consoles.
- Introduced scripts for managing Gamescope and Steam sessions, including launch scripts for various emulators (Genesis, PSP, RPCS3, SNES).
- Created systemd service for Gamescope session management.
- Developed Ansible playbook for configuring Fedora for optimized Sunshine and Gamescope streaming, including user setup and system configurations.
- Updated Prometheus configuration to reflect changes in exporter targets.
- Commented out the Devolo exporter module in Terraform configuration for future reference.
2025-10-25 23:54:05 +02:00
alexandre.pires 161efa5230 fix(devolo-exporter): adjust scrape interval and enhance health check functionality 2025-10-14 22:43:02 +02:00
alexandre.pires d069fe3585 feat(cert-checker): add Kubernetes resources for certificate checking functionality
- Implemented a new module for cert-checker with Kubernetes resources including ServiceAccount, Role, RoleBinding, ConfigMap, and CronJob.
- Added Python script to check certificate expiry and restart deployments if necessary.
- Configured environment variables for deployment name, namespace, and service details.
- Included requirements for the Python environment.

feat(devolo-exporter): introduce Devolo exporter for Prometheus metrics

- Created a new module for Devolo exporter with Kubernetes resources including ServiceAccount, ConfigMap, Deployment, and Service.
- Developed Python scripts to scrape metrics from Devolo devices and expose them to Prometheus.
- Configured environment variables for Devolo device IP, model, and ports.
- Added requirements for the Python environment.
2025-10-13 22:35:35 +02:00
alexandre.pires 84c8288f8a feat: implement getmail runner script and update email fetching configuration 2025-10-06 23:36:50 +02:00
alexandre.pires 7f9a64b0ed fix: update telegram chat ID comment for clarity 2025-10-06 18:49:02 +02:00
alexandre.pires 429a94332e feat: add disk exporter module and related configurations
- Introduced a new disk exporter module to monitor disk health using SMART data.
- Updated `apps.tf` to include the disk exporter module with necessary parameters.
- Added local variables for smartctl version and checksum in `config.tf`.
- Enhanced `alertmanager.yml` to handle DiskUnhealthy alerts with specific grouping and dispatch settings.
- Created new Prometheus rules for monitoring disk health, including alerts for unhealthy disks.
- Updated Prometheus configuration to scrape metrics from the new disk exporter.
- Enhanced Telegram notification template to include resolved alerts and improved formatting.
- Updated the auth-exporter module to specify the Python image tag correctly.
- Created the disk-exporter module with Kubernetes resources, including deployment, service account, and config map.
- Added necessary Python scripts and requirements for the disk exporter functionality.
2025-10-06 18:41:01 +02:00
alexandre.pires 0e167d747d Add hpz440 host configuration and SSH setup for Windows; update Prometheus targets and variables 2025-10-05 23:18:44 +02:00
alexandre.pires 9b330f84a2 Enhance Telegram alert template: add handling for resolved alerts and improve message formatting 2025-10-05 00:02:43 +02:00
alexandre.pires 0d3fb56f78 Add Prometheus and Alertmanager configurations: implement custom rules, alerting, and Telegram notifications 2025-10-04 18:05:10 +02:00
alexandre.pires 7cad175406 Add Prometheus setup for Windows: implement playbook, tasks, and Grafana dashboard configuration 2025-10-03 21:56:31 +02:00
alexandre.pires cd69dbc25a Add auth exporter module: implement Prometheus scrape configuration, exporter logic, and Grafana dashboard 2025-10-03 00:59:58 +02:00
alexandre.pires eb60d37c2d Add auth exporter module: implement Kubernetes resources, exporter logic, and testing 2025-10-03 00:26:47 +02:00
alexandre.pires 0a0d4c9c15 Add Node Exporter and Fail2Ban Exporter modules: implement Kubernetes resources and Prometheus scrape configurations 2025-10-02 20:02:53 +02:00
alexandre.pires a412c96c46 Add cert checker module: implement Kubernetes resources, certificate validation logic, and deployment restart functionality 2025-10-02 16:53:28 +02:00
alexandre.pires e6a3f3affd Add custom error pages and Nginx configuration for proxy module
- Introduced custom HTML error pages for various HTTP status codes (400, 401, 403, 404, 408, 429, 500, 502, 503, 504) in the proxy module.
- Created a .gitignore file to exclude non-HTML files in the error resources directory.
- Updated Nginx configuration to serve custom error pages for upstream errors.
- Added new Nginx configuration templates for handling HTTP and stream protocols.
- Implemented Wireguard configuration templates and associated variables for secure connections.
- Established Kubernetes resources for Stunnel and Wireguard, including deployment, service accounts, and config maps.
- Defined variables for the Stunnel and Wireguard modules to facilitate configuration.
- Created a new Wol Proxy module with Kubernetes resources for deployment and service management.
2025-10-02 00:19:01 +02:00
alexandre.pires 4d00986273 Refactor Trivy integration: update report generation scripts, enhance email dispatch logic, and remove obsolete test file 2025-09-22 19:23:45 +02:00
alexandre.pires 1e8526f442 Enhance Trivy integration: update email dispatch logic, add LLM prompt generation, and improve security context in deployments 2025-09-21 23:55:53 +02:00
alexandre.pires aee57a8b89 Refactor Gitea and SSH configurations, update backup scripts, and enhance Nginx settings
- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand.
- Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters.
- Removed unused gitea-auth script from playbook_gitea.yml.
- Updated systools_version in playbook_systools.yml to 0.4.5.
- Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS.
- Added a new script test_imaps for IMAP testing.
- Updated Terraform configurations for various applications, including:
  - Added a backup script for MariaDB with retention policy.
  - Changed Gitea version to 1.24-rootless and adjusted SSH settings.
  - Updated Nginx configurations to log errors and access to stderr/stdout.
  - Refactored services to use ClusterIP type and adjusted security contexts for deployments.
  - Added temporary storage for applications using empty_dir.
  - Enhanced backup.sh scripts for better error handling and logging.
2025-09-20 21:34:33 +02:00
alexandre.pires ff4197e757 Refactor m3uproxy configuration: update cache and data paths, adjust JSON structure for EPG and auth file 2025-09-07 20:56:44 +02:00
alexandre.pires 50758b2bb2 Update Dockerfile and Terraform configurations: upgrade Ollama version, add log level variable, and set default log level 2025-09-07 20:42:06 +02:00
alexandre.pires fa2d111bbe Minor fixes 2025-07-06 23:09:45 +02:00
alexandre.pires bef5d94023 Adde a few changes 2025-07-06 22:56:13 +02:00
alexandre.pires 372df1b9e9 Add Windows game optimization setup and configuration scripts 2025-07-05 21:36:47 +02:00
alexandre.pires 6579e15394 Added auto-suspend, added wol proxy for ollama 2025-06-22 18:43:55 +02:00
alexandre.pires c162944a73 Add support for nginx streams 2025-06-16 23:19:25 +02:00
alexandre.pires b813cf8eda Added opnsense install 2025-06-15 22:48:22 +02:00
alexandre.pires fc21db9e43 Disabled sftpgo 2025-06-10 17:15:54 +02:00
alexandre.pires b130883bc6 Enable delete of mails after deliver 2025-06-10 17:07:44 +02:00
alexandre.pires 826959c903 Add Nextcloud deployment and configuration
- Introduced Nextcloud module with Kubernetes resources including deployment, service, ingress, and cron job.
- Configured Apache settings for Nextcloud with SSL support and compression.
- Created secrets for mail and admin credentials.
- Added necessary environment variables for Nextcloud configuration.
- Removed unused Scaleway access and secret keys from secrets and variables.
- Updated CoreDNS module to support custom host overrides.
- Implemented backup bucket policies and lifecycle rules for Scaleway object storage.
- Enhanced IAM policies and applications for backup and email services.
- Added outputs for backup bucket and API keys.
2025-06-09 23:49:43 +02:00
alexandre.pires 359b6d47aa feat(comfyui): add Dockerfile, playbook, and Terraform configurations for ComfyUI setup 2025-06-08 21:18:53 +02:00
alexandre.pires d969525b58 feat(nginx-reverse-proxy): add custom error pages and update configuration for error handling 2025-06-07 22:10:42 +02:00
alexandre.pires 01bf71f8d2 feat(cert-manager): Add Cloudns issuer and DNS-01 challenge support
- Introduced a new Cloudns issuer configuration for cert-manager.
- Created separate tasks for DNS-01 and HTTP-01 challenge issuers.
- Updated cert-manager tasks to include Cloudns provider and manage secrets.
- Refactored existing LetsEncrypt issuer registration to use new task structure.
- Added necessary Kubernetes resources for Cloudns integration, including RBAC and certificates.
- Updated Terraform configurations to support new DNS records and service changes.
- Adjusted deployment strategies for CoreDNS and Open WebUI applications.
2025-06-07 20:39:38 +02:00
alexandre.pires 3cda0b5624 Add configuration for CoreDNS and update host variables for lab environment 2025-06-07 16:12:55 +02:00
alexandre.pires d3b8aff1ae - Implemented samba service
- Improved firewall rules
2025-06-06 23:49:38 +02:00
alexandre.pires 3ea65f060f Major changes 2025-06-05 23:27:50 +02:00
alexandre.pires 755e14a602 Improved AI roles 2025-06-02 22:52:04 +02:00
alexandre.pires 54f7e5536a Added support for private apis 2025-06-02 01:42:17 +02:00
alexandre.pires b0162abb88 Addes support for reverse proxy to home server 2025-06-01 17:14:33 +02:00
alexandre.pires 071b4eea9e feat(ssh_locker): implement ssh locker helper scripts and configuration for Duo API integration 2025-05-22 22:55:27 +02:00
alexandre.pires c9def750f6 feat(ansible): add playbook for installing A13Labs systools with tasks for downloading, unpacking, and setting permissions 2025-05-19 00:34:21 +02:00
alexandre.pires 4e07e062ce fix(m3uproxy): update playlist file references from .m3u8 to .json and correct descriptions in variables 2025-05-18 12:20:49 +02:00
alexandre.pires 15b07ea85d feat(encryption): refactor encryption provider scripts, update KMS integration, and enhance key management 2025-05-12 22:43:42 +02:00
alexandre.pires 05d1624bdd feat(terraform): update metallb version, refactor IAM policies, and enhance security 2025-05-11 20:58:05 +02:00
alexandre.pires 19f599e502 feat(secrets): replace config maps with secrets for sensitive configurations in multiple modules 2025-05-11 20:17:35 +02:00
alexandre.pires 457f2bd810 feat(encryption): implement AWS KMS integration with encryption provider and update related configurations 2025-05-11 19:41:48 +02:00
alexandre.pires 3e12b13d95 fix(backup): update security context in cron job and improve backup script logging 2025-05-10 19:40:01 +02:00
alexandre.pires 01fc509795 feat(backup): update backup script and configuration to use variable tag and change source path 2025-05-10 19:18:16 +02:00
alexandre.pires a19c71009f feat(backup): add environment variables for app name and backup retention in cron job and fix quoting in backup script 2025-05-10 19:09:21 +02:00